
Mailing List Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [tlug] Subsidized FIDO U2F security keys
- Date: Mon, 5 Oct 2015 14:01:04 +0200
- From: Francois Cartegnie <fcartegnie@example.com>
- Subject: Re: [tlug] Subsidized FIDO U2F security keys
- References: <560F693E.1000000@onjapan.net> <CAKXLc7c5Huz1oD0SnWY3MO2Z0neSxypFFFCpLjCxDp3VszE=3w@mail.gmail.com>
- User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0
Le 05/10/2015 09:06, Kalin KOZHUHAROV a écrit :
> https://www.yubico.com/github-special-offer/github-yubikey-special-offer/
>>
> I couldn't see what the offer is without logging, but I assume those are
> just the standard keys with some sticker or custom color right? So can be
> used in other contexts (since I probably don't need two for github).
Just regular *U2F only* keys, which will only protect website login.
Won't support other non U2F (TOTP, ...) websites.
ssh keys are still left out of the HSM, so it does not prevent someone
to push evil code with stolen ssh keys.
But I've never seen them discounting Neo models :/
You can already find U2F keys for as low $6 (Happlink), Yubi Neo is sold
$50 but a smartcard providing all Nano features (except U2F, NXP J3A081)
are <$15. All Yubikeys regular prices seems a bit overpriced.
Francois
Home |
Main Index |
Thread Index